danielgtaylor / danielgtaylor/ladon

minimatch@1.0.0 is deprecated

Open
#10 0 comments 0 reactions 0 assignees View on GitHub
Dominant language
JavaScript
Stars
83
Forks
6
PR merge metrics
No merged PRs in 30d

Description

_sudo npm install -g ladon_

**npm WARN deprecated minimatch@1.0.0: Please update to minimatch 3.0.2 or higher to avoid a RegExp DoS issue**

Contributor guide

No contributing guide indexed for this repository

Research direction

Reproduce the warning with `sudo npm install -g ladon`, then locate the dependency manifest and inspect how minimatch@1.0.0 is declared. Update the dependency to minimatch 3.0.2 or higher and rerun the install to confirm the deprecation and security warning no longer appears.

Written by the indexing model from the issue text.

Assessment

Tech stack
javascript
Domain
cli, tooling
Issue type
Bug
Difficulty
2/5
Estimated time
1-3 hours
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
35/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.